
carminat-tomtom-live-re
Reverse engineering du NavCore 9.884 embarqué Renault (codename beaumont)

Reverse engineering du NavCore 9.884 embarqué Renault (codename beaumont)

Passive wireless intrusion detection system for ESP32-S3 and Flipper Zero that detects Wi-Fi deauthentication and disassociation attacks in real…

Memory-safe, multi-process library OS for Intel SGX that runs legacy applications inside enclaves with encrypted filesystems and lightweight…

Experimental research code for analyzing d_olex firmware and performing preboot-stage attacks against firmware boot code.

Go-based exploits for unauthenticated network vulnerabilities in routers, VPNs, appliances, and IoT, bundled with PCAPs, Suricata/Snort/YARA/Sigma…

Open research documentation and source review for ZTE MF904Q bootloader, firmware extraction, and reverse engineering.

Example project to demonstrate packet injection / sniffer capabilities of ESP8266 IC.

ESP32 firmware that sniffs PROBE REQUEST packets sent by smartphones searching for Wi-Fi connection to extract different types of information

EDK2 BrotliCustomDecompressLib security findings — coordinated disclosure

Patches Xiaomi router firmware images to enable SSH access and install custom firmware, with automated Windows and Linux/macOS launcher scripts.

Research toolkit that roots a Samsung Tizen 9 TV via a Chromium WasmGC RCE and V4L2 physmap arbitrary physical memory access, with persistent on-boot…

Experimental Nikon Z7 camera firmware research lab: source patcher, QEMU emulation harness, and validation tooling for building and testing modified…

Research methods for reverse engineering encrypted firmware and software with AI-assisted analysis, independent validation, and public-source…

Disguised as an ASUS XG C100C network card and implement fake traffic communication function

Meaningful control of data in distributed systems.

Read and write IMEI records and WiFi/Bluetooth addresses in MediaTek NVRAM files or partition images. Includes interactive ADB tools for rooted…

PSP exploit for AMD navi31 (RX 7900) GPUs that disables firmware signature checks so the card loads unsigned SMU, SDMA, MEC, IMU and RLC firmware;…

A repository of SLEIGH support for rare processor ISAs